Study guide — AZ-500

Manage Microsoft Entra identities

• Configure security for service principals and managed identities
• Manage Microsoft Entra users, groups, and administrative units
• Configure external identities, including B2B collaboration settings

Manage secure access using Microsoft Entra ID

• Plan and implement multi-factor authentication (MFA) and self-service password reset
• Implement and manage conditional access policies
• Configure Microsoft Entra ID Protection, including risk-based policies
• Configure Privileged Identity Management (PIM) for Entra roles and Azure resources

Manage application access

• Plan and implement app registrations and enterprise applications
• Configure app permissions and consent, including admin consent workflows
• Manage API permissions to Microsoft Graph and other APIs

Manage access control

• Plan and configure Azure role-based access control (RBAC)
• Create and assign custom roles
• Configure Azure Blueprints and resource locks for governance